| CVE-2026-72651 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72650 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing…
|
4.3
Moyenne
|
13 août 2026 |
| CVE-2026-72663 |
Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72661 |
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72660 |
Uncaught Exception (CWE-248), resulting from Improper Input Validation (CWE-20), in Kibana can lead to denial of service…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72659 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72658 |
Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery…
|
7.3
Élevée
|
13 août 2026 |
| CVE-2026-72667 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72666 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized query execution against…
|
6.8
Moyenne
|
13 août 2026 |
| CVE-2026-72665 |
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response…
|
8.1
Élevée
|
13 août 2026 |
| CVE-2026-72664 |
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend response actions on…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72677 |
Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path…
|
7.3
Élevée
|
13 août 2026 |
| CVE-2026-72675 |
Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data…
|
7.1
Élevée
|
13 août 2026 |
| CVE-2026-72674 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72673 |
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locations via…
|
5.4
Moyenne
|
13 août 2026 |
| CVE-2026-72672 |
The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts…
|
7.7
Élevée
|
13 août 2026 |
| CVE-2026-72671 |
A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained…
|
4.3
Moyenne
|
13 août 2026 |
| CVE-2026-72670 |
A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a…
|
7.7
Élevée
|
13 août 2026 |
| CVE-2026-72669 |
The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the…
|
7.6
Élevée
|
13 août 2026 |
| CVE-2026-72681 |
Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-72680 |
Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-49089 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive…
|
6.5
Moyenne
|
13 août 2026 |
| CVE-2026-63262 |
Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via…
|
4.3
Moyenne
|
21 juil. 2026 |
| CVE-2026-63261 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Moyenne
|
21 juil. 2026 |
| CVE-2026-63260 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Moyenne
|
21 juil. 2026 |